Sr Manager, Governance, Risk and Compliance
Core
Leads the Governance, Risk & Compliance (GRC) function within the Enterprise Security Office, owning strategic vision, team leadership, and operational execution to reduce enterprise risk.
Role type
Senior Manager, People-leadership track (GRC)
Builds
GRC framework, centralized IT policy governance, risk assessment processes, and vendor cyber risk management programs
Domain
Cybersecurity / Enterprise Risk Management / Homebuilding
Required skills
Strategic planning, team building and leadership, cross-functional partnership, executive communication, risk assessment, vendor risk management, regulatory compliance, AI tool adoption
Preferred skills
Big 4 IT audit background, CISA/CISM/CISSP/CRISC/CIA/CGEIT certifications
Technologies
NIST CSF, NIST 800-53/800-171, CIS Controls, CMMC, SOX IT controls
Responsibilities
Own strategic vision and roadmap for GRC; Build and develop a high-performing distributed team; Partner cross-functionally to align priorities and reduce risk; Translate technical risk into executive-level reporting; Establish and track GRC improvement metrics; Drive adoption of AI tools for workflow efficiency; Develop and maintain security awareness programs
Seniority
Senior Manager, People-leadership track